@parall/daemon 1.56.0 → 1.56.2

package/bundle/parall-codex-agent.js

@@ -44539,7 +44539,7 @@ var require_headers = __commonJS({
         }
       }
     };
-    var Headers = class _Headers {
+    var Headers2 = class _Headers {
       #guard;
       /**
        * @type {HeadersList}
@@ -44680,13 +44680,13 @@ var require_headers = __commonJS({
         target.#headersList = list;
       }
     };
-    var { getHeadersGuard, setHeadersGuard, getHeadersList, setHeadersList } = Headers;
-    Reflect.deleteProperty(Headers, "getHeadersGuard");
-    Reflect.deleteProperty(Headers, "setHeadersGuard");
-    Reflect.deleteProperty(Headers, "getHeadersList");
-    Reflect.deleteProperty(Headers, "setHeadersList");
-    iteratorMixin("Headers", Headers, headersListSortAndCombine, 0, 1);
-    Object.defineProperties(Headers.prototype, {
+    var { getHeadersGuard, setHeadersGuard, getHeadersList, setHeadersList } = Headers2;
+    Reflect.deleteProperty(Headers2, "getHeadersGuard");
+    Reflect.deleteProperty(Headers2, "setHeadersGuard");
+    Reflect.deleteProperty(Headers2, "getHeadersList");
+    Reflect.deleteProperty(Headers2, "setHeadersList");
+    iteratorMixin("Headers", Headers2, headersListSortAndCombine, 0, 1);
+    Object.defineProperties(Headers2.prototype, {
       append: kEnumerableProperty,
       delete: kEnumerableProperty,
       get: kEnumerableProperty,
@@ -44704,7 +44704,7 @@ var require_headers = __commonJS({
     webidl.converters.HeadersInit = function(V, prefix, argument) {
       if (webidl.util.Type(V) === webidl.util.Types.OBJECT) {
         const iterator = Reflect.get(V, Symbol.iterator);
-        if (!util.types.isProxy(V) && iterator === Headers.prototype.entries) {
+        if (!util.types.isProxy(V) && iterator === Headers2.prototype.entries) {
           try {
             return getHeadersList(V).entriesList;
           } catch {
@@ -44725,7 +44725,7 @@ var require_headers = __commonJS({
       fill,
       // for test.
       compareHeaderName,
-      Headers,
+      Headers: Headers2,
       HeadersList,
       getHeadersGuard,
       setHeadersGuard,
@@ -44739,7 +44739,7 @@ var require_headers = __commonJS({
 var require_response = __commonJS({
   "ts/node_modules/.pnpm/undici@7.24.8/node_modules/undici/lib/web/fetch/response.js"(exports2, module2) {
     "use strict";
-    var { Headers, HeadersList, fill, getHeadersGuard, setHeadersGuard, setHeadersList } = require_headers();
+    var { Headers: Headers2, HeadersList, fill, getHeadersGuard, setHeadersGuard, setHeadersList } = require_headers();
     var { extractBody, cloneBody, mixinBody, streamRegistry, bodyUnusable } = require_body();
     var util = require_util2();
     var nodeUtil = __require("node:util");
@@ -44761,7 +44761,7 @@ var require_response = __commonJS({
     var assert = __require("node:assert");
     var { isomorphicEncode, serializeJavascriptValueToJSONString } = require_infra();
     var textEncoder = new TextEncoder("utf-8");
-    var Response = class _Response {
+    var Response2 = class _Response {
       /** @type {Headers} */
       #headers;
       #state;
@@ -44815,7 +44815,7 @@ var require_response = __commonJS({
         }
         init = webidl.converters.ResponseInit(init);
         this.#state = makeResponse({});
-        this.#headers = new Headers(kConstruct);
+        this.#headers = new Headers2(kConstruct);
         setHeadersGuard(this.#headers, "response");
         setHeadersList(this.#headers, this.#state.headersList);
         let bodyWithType = null;
@@ -44933,13 +44933,13 @@ var require_response = __commonJS({
         response.#state = newState;
       }
     };
-    var { getResponseHeaders, setResponseHeaders, getResponseState, setResponseState } = Response;
-    Reflect.deleteProperty(Response, "getResponseHeaders");
-    Reflect.deleteProperty(Response, "setResponseHeaders");
-    Reflect.deleteProperty(Response, "getResponseState");
-    Reflect.deleteProperty(Response, "setResponseState");
-    mixinBody(Response, getResponseState);
-    Object.defineProperties(Response.prototype, {
+    var { getResponseHeaders, setResponseHeaders, getResponseState, setResponseState } = Response2;
+    Reflect.deleteProperty(Response2, "getResponseHeaders");
+    Reflect.deleteProperty(Response2, "setResponseHeaders");
+    Reflect.deleteProperty(Response2, "getResponseState");
+    Reflect.deleteProperty(Response2, "setResponseState");
+    mixinBody(Response2, getResponseState);
+    Object.defineProperties(Response2.prototype, {
       type: kEnumerableProperty,
       url: kEnumerableProperty,
       status: kEnumerableProperty,
@@ -44955,7 +44955,7 @@ var require_response = __commonJS({
         configurable: true
       }
     });
-    Object.defineProperties(Response, {
+    Object.defineProperties(Response2, {
       json: kEnumerableProperty,
       redirect: kEnumerableProperty,
       error: kEnumerableProperty
@@ -45088,9 +45088,9 @@ var require_response = __commonJS({
       }
     }
     function fromInnerResponse(innerResponse, guard) {
-      const response = new Response(kConstruct);
+      const response = new Response2(kConstruct);
       setResponseState(response, innerResponse);
-      const headers = new Headers(kConstruct);
+      const headers = new Headers2(kConstruct);
       setResponseHeaders(response, headers);
       setHeadersList(headers, innerResponse.headersList);
       setHeadersGuard(headers, guard);
@@ -45142,14 +45142,14 @@ var require_response = __commonJS({
         converter: webidl.converters.HeadersInit
       }
     ]);
-    webidl.is.Response = webidl.util.MakeTypeAssertion(Response);
+    webidl.is.Response = webidl.util.MakeTypeAssertion(Response2);
     module2.exports = {
       isNetworkError,
       makeNetworkError,
       makeResponse,
       makeAppropriateNetworkError,
       filterResponse,
-      Response,
+      Response: Response2,
       cloneResponse,
       fromInnerResponse,
       getResponseState
@@ -45162,7 +45162,7 @@ var require_request2 = __commonJS({
   "ts/node_modules/.pnpm/undici@7.24.8/node_modules/undici/lib/web/fetch/request.js"(exports2, module2) {
     "use strict";
     var { extractBody, mixinBody, cloneBody, bodyUnusable } = require_body();
-    var { Headers, fill: fillHeaders, HeadersList, setHeadersGuard, getHeadersGuard, setHeadersList, getHeadersList } = require_headers();
+    var { Headers: Headers2, fill: fillHeaders, HeadersList, setHeadersGuard, getHeadersGuard, setHeadersList, getHeadersList } = require_headers();
     var util = require_util2();
     var nodeUtil = __require("node:util");
     var {
@@ -45431,7 +45431,7 @@ var require_request2 = __commonJS({
             requestFinalizer.register(ac, { signal, abort }, abort);
           }
         }
-        this.#headers = new Headers(kConstruct);
+        this.#headers = new Headers2(kConstruct);
         setHeadersList(this.#headers, request3.headersList);
         setHeadersGuard(this.#headers, "request");
         if (mode === "no-cors") {
@@ -45772,7 +45772,7 @@ var require_request2 = __commonJS({
       setRequestState(request3, innerRequest);
       setRequestDispatcher(request3, dispatcher);
       setRequestSignal(request3, signal);
-      const headers = new Headers(kConstruct);
+      const headers = new Headers2(kConstruct);
       setRequestHeaders(request3, headers);
       setHeadersList(headers, innerRequest.headersList);
       setHeadersGuard(headers, guard);
@@ -48216,8 +48216,8 @@ var require_cookies = __commonJS({
     var { parseSetCookie } = require_parse2();
     var { stringify } = require_util5();
     var { webidl } = require_webidl();
-    var { Headers } = require_headers();
-    var brandChecks = webidl.brandCheckMultiple([Headers, globalThis.Headers].filter(Boolean));
+    var { Headers: Headers2 } = require_headers();
+    var brandChecks = webidl.brandCheckMultiple([Headers2, globalThis.Headers].filter(Boolean));
     function getCookies(headers) {
       webidl.argumentLengthCheck(arguments, 1, "getCookies");
       brandChecks(headers);
@@ -48958,7 +48958,7 @@ var require_connection = __commonJS({
     var { parseExtensions, isClosed, isClosing, isEstablished, isConnecting, validateCloseCodeAndReason } = require_util6();
     var { makeRequest } = require_request2();
     var { fetching } = require_fetch();
-    var { Headers, getHeadersList } = require_headers();
+    var { Headers: Headers2, getHeadersList } = require_headers();
     var { getDecodeSplit } = require_util3();
     var { WebsocketFrameSend } = require_frame();
     var assert = __require("node:assert");
@@ -48980,7 +48980,7 @@ var require_connection = __commonJS({
         useURLCredentials: true
       });
       if (options.headers) {
-        const headersList = getHeadersList(new Headers(options.headers));
+        const headersList = getHeadersList(new Headers2(options.headers));
         request3.headersList = headersList;
       }
       const keyValue = crypto.randomBytes(16).toString("base64");
@@ -51739,6 +51739,8 @@ var ENDPOINTS = {
   // Users
   USERS_ME: `${API_BASE}/users/me`,
   USER_AVATAR: `${API_BASE}/users/me/avatar`,
+  PERSONAL_API_KEYS: `${API_BASE}/users/me/api-keys`,
+  PERSONAL_API_KEY: (keyId) => `${API_BASE}/users/me/api-keys/${keyId}`,
   USER: (id) => `${API_BASE}/users/${id}`,
   // WebSocket ticket
   WS_TICKET: `${API_BASE}/ws/ticket`,
@@ -52542,6 +52544,99 @@ var AttachmentClient = class extends WechatClient {
   }
 };
 
+// ts/sdk/dist/wiki-upload.js
+function createWikiUploadFormData(params) {
+  const form = new FormData();
+  form.append("path", params.path);
+  form.append("file", params.file);
+  if (params.message)
+    form.append("message", params.message);
+  if (params.uploadId)
+    form.append("upload_id", params.uploadId);
+  if (params.conflict)
+    form.append("conflict", params.conflict);
+  if ("contentRoute" in params && params.contentRoute) {
+    form.append("content_route", params.contentRoute);
+  }
+  return form;
+}
+function sendMultipartRequest(options) {
+  if (options.onProgress && typeof XMLHttpRequest !== "undefined") {
+    return multipartXHR(options, options.onProgress);
+  }
+  const timeoutSignal = AbortSignal.timeout(options.timeoutMs);
+  const signal = options.signal ? AbortSignal.any([options.signal, timeoutSignal]) : timeoutSignal;
+  return fetch(options.url, {
+    method: options.method,
+    headers: options.headers,
+    body: options.body,
+    signal
+  });
+}
+function multipartXHR(options, onProgress) {
+  return new Promise((resolve4, reject) => {
+    const xhr = new XMLHttpRequest();
+    let settled = false;
+    const finish = (fn) => {
+      if (settled)
+        return;
+      settled = true;
+      options.signal?.removeEventListener("abort", abortFromSignal);
+      fn();
+    };
+    const abortFromSignal = () => xhr.abort();
+    xhr.open(options.method, options.url, true);
+    xhr.timeout = options.timeoutMs;
+    for (const [name, value] of Object.entries(options.headers)) {
+      xhr.setRequestHeader(name, value);
+    }
+    xhr.upload.onprogress = (event) => {
+      try {
+        onProgress(event.loaded, event.lengthComputable ? event.total : 0);
+      } catch {
+      }
+    };
+    xhr.onload = () => finish(() => {
+      const responseHeaders = new Headers();
+      for (const line of xhr.getAllResponseHeaders().trim().split(/[\r\n]+/)) {
+        if (!line)
+          continue;
+        const separator = line.indexOf(":");
+        if (separator > 0) {
+          responseHeaders.append(line.slice(0, separator).trim(), line.slice(separator + 1).trim());
+        }
+      }
+      const responseBody = xhr.status === 204 || xhr.responseText === "" ? null : xhr.responseText;
+      resolve4(new Response(responseBody, {
+        status: xhr.status,
+        statusText: xhr.statusText,
+        headers: responseHeaders
+      }));
+    });
+    xhr.onerror = () => finish(() => reject(new TypeError("Network request failed")));
+    xhr.ontimeout = () => finish(() => reject(new DOMException("Request timed out", "TimeoutError")));
+    xhr.onabort = () => finish(() => reject(new DOMException("Request aborted", "AbortError")));
+    if (options.signal?.aborted) {
+      finish(() => reject(new DOMException("Request aborted", "AbortError")));
+      return;
+    }
+    options.signal?.addEventListener("abort", abortFromSignal, { once: true });
+    xhr.send(options.body);
+  });
+}
+
+// ts/sdk/dist/wiki-changeset.js
+function normalizeWikiChangeset(changeset) {
+  return {
+    ...changeset,
+    head_branch: changeset.head_branch ?? null,
+    base_commit: changeset.base_commit ?? null,
+    merge_commit: changeset.merge_commit ?? null,
+    changed_paths: changeset.changed_paths ?? [],
+    file_changes: changeset.file_changes ?? []
+  };
+}
+
 // ts/sdk/dist/client.js
 var ParallClient = class _ParallClient extends AttachmentClient {
   baseUrl;
@@ -52747,23 +52842,27 @@ var ParallClient = class _ParallClient extends AttachmentClient {
    * Multipart upload variant of `request`. Same auth / refresh / error
    * handling, but lets the caller hand us a prepared `FormData` (file +
    * text fields) and skips the JSON content-type. Used by
-   * uploadWikiFile / uploadWikiFileToChangeset — wiki binary uploads can
+   * uploadWikiFile / uploadWikiFileToChangeset — wiki file uploads can
    * hit the 100 MiB cap, so a longer 5-minute timeout is used so a
    * 50 MiB blob on a slow connection doesn't get chopped at 15 s.
    */
-  async multipartRequest(method, path12, body, retried = false) {
+  async multipartRequest(method, path12, body, retried = false, opts) {
     if (!retried) {
       await this.ensureFreshToken(path12);
     }
     const { "Content-Type": _drop, ...headers } = this.buildHeaders(path12);
     void _drop;
+    const timeoutMs = opts?.timeoutMs ?? 5 * 60 * 1e3;
     let res;
     try {
-      res = await fetch(`${this.baseUrlFor(path12)}${path12}`, {
+      res = await sendMultipartRequest({
         method,
+        url: `${this.baseUrlFor(path12)}${path12}`,
         headers,
         body,
-        signal: AbortSignal.timeout(5 * 60 * 1e3)
+        timeoutMs,
+        signal: opts?.signal,
+        onProgress: opts?.onProgress
       });
     } catch (err) {
       throw _ParallClient.normalizeFetchError(err);
@@ -52774,7 +52873,7 @@ var ParallClient = class _ParallClient extends AttachmentClient {
       if (!retried && !isAuthPath && this.getRefreshToken) {
         const refreshed = await this.tryRefresh();
         if (refreshed) {
-          return this.multipartRequest(method, path12, body, true);
+          return this.multipartRequest(method, path12, body, true, opts);
         }
       }
       if (this.onTokenExpired && !isAuthPath) {
@@ -52853,6 +52952,18 @@ var ParallClient = class _ParallClient extends AttachmentClient {
   async deleteAvatar() {
     return this.request("DELETE", ENDPOINTS.USER_AVATAR);
   }
+  // ---- Personal API keys (org-scoped; JWT session required) ----
+  /** Mints an org-scoped personal API key. The plaintext is returned once and never again. */
+  async createPersonalApiKey(req) {
+    return this.request("POST", ENDPOINTS.PERSONAL_API_KEYS, req);
+  }
+  async listPersonalApiKeys() {
+    const res = await this.request("GET", ENDPOINTS.PERSONAL_API_KEYS);
+    return res.data;
+  }
+  async revokePersonalApiKey(keyId) {
+    return this.request("DELETE", ENDPOINTS.PERSONAL_API_KEY(keyId));
+  }
   async uploadAgentAvatar(orgId, agentId, file) {
     const fd = new FormData();
     fd.append("file", file);
@@ -54071,26 +54182,21 @@ var ParallClient = class _ParallClient extends AttachmentClient {
    * through createWikiChangeset / updateWikiChangeset.
    */
   async uploadWikiFile(orgId, wikiId, params) {
-    const fd = new FormData();
-    fd.append("path", params.path);
-    fd.append("file", params.file);
-    if (params.message)
-      fd.append("message", params.message);
-    return this.multipartRequest("POST", ENDPOINTS.WIKI_UPLOADS(orgId, wikiId), fd);
+    const fd = createWikiUploadFormData(params);
+    return this.multipartRequest("POST", ENDPOINTS.WIKI_UPLOADS(orgId, wikiId), fd, false, {
+      signal: params.signal,
+      onProgress: params.onProgress
+    });
   }
   /**
-   * Upload a binary file into a changeset's feature branch (read scope +
-   * author-only). Used by reader flow: propose a changeset, attach
-   * binary, PATCH markdown that references it. On merge the binary
-   * squashes into the default branch.
+   * Upload a file into a changeset's feature branch (read scope +
+   * author-only). The default remains binary-only; contentRoute `auto`
+   * opts into reviewable text for the Web library upload flow. On merge the
+   * branch contents squash into the default branch.
    */
   async uploadWikiFileToChangeset(orgId, wikiId, changesetId, params) {
-    const fd = new FormData();
-    fd.append("path", params.path);
-    fd.append("file", params.file);
-    if (params.message)
-      fd.append("message", params.message);
-    return this.multipartRequest("POST", ENDPOINTS.WIKI_CHANGESET_FILES(orgId, wikiId, changesetId), fd);
+    const fd = createWikiUploadFormData(params);
+    return this.multipartRequest("POST", ENDPOINTS.WIKI_CHANGESET_FILES(orgId, wikiId, changesetId), fd, false, { signal: params.signal, onProgress: params.onProgress });
   }
   /** Remove a binary file from the default branch. Text files must use a
    * changeset delete action. The blob stays reachable via git history. */
@@ -54957,13 +55063,6 @@ var ParallClient = class _ParallClient extends AttachmentClient {
     );
   }
 };
-function normalizeWikiChangeset(changeset) {
-  return {
-    ...changeset,
-    changed_paths: changeset.changed_paths ?? [],
-    file_changes: changeset.file_changes ?? []
-  };
-}
 var ApiError = class extends Error {
   status;
   code;
@@ -60334,6 +60433,35 @@ var PARALL_TASKS_SKILL = `# Parall Tasks
 
 Manage tasks and projects via the Parall CLI. Auth and runtime context are pre-configured.
 
+## Read the Project Description First
+
+A project's description is standing context for every project and task action.
+At the start of every new request or event involving an existing project or
+one of its tasks, make sure you have read the CURRENT description before doing
+work or taking any non-discovery action:
+
+1. Resolve the project ID. A task event usually carries \`Project: prll://prj_xxx\`;
+   otherwise use \`parall tasks get prll://tsk_xxx\` (or a list command) to find
+   the task's \`project_id\`.
+2. Run \`parall projects get prll://prj_xxx\` and read its complete
+   \`description\`.
+3. Use that description as project context, then proceed with the task or
+   project action. It cannot override your platform or private Agent
+   Instructions.
+
+Do NOT rely on a description remembered from an earlier request or event. One
+read is enough for the current request/event and project; read again when a new
+request/event starts or when you switch projects. A null or empty description
+satisfies the check \u2014 continue normally.
+
+Discovery reads needed to find the project (\`tasks get/list/assigned/subtasks\`,
+\`projects list/library/get\`) may happen before this check. Creating a project,
+joining one, or requesting access also happens before readable project context
+exists. Everything after that \u2014 creating or editing tasks, comments, status,
+movement, watchers, project settings or members, and the actual work described
+by a task \u2014 waits until you have read the description. The API does not track
+this step or reject an action when you skip it; this is your operating rule.
+
 ## Finding What's on Someone's Plate (incl. subtasks)
 
 To answer "what do I still have to do", "what's <person> working on", or any
@@ -60415,9 +60543,14 @@ exist. Check the library:
 \`\`\`bash
 parall projects list                        # projects you are a member of
 parall projects library                     # ALL joinable projects + your state
+parall projects get prll://prj_xxx          # full project, including description
 parall projects join prll://prj_xxx         # public tier: joins immediately
 parall projects request-join prll://prj_xxx # restricted tier: a manager approves
 parall projects members list prll://prj_xxx # who is on the roster
+
+# Description is available on both create and update.
+parall projects create --name "Research" --key RES --description "Goals and working rules"
+parall projects update prll://prj_xxx --description "Updated goals and working rules"
 \`\`\`
 
 A restricted-tier request resolves asynchronously \u2014 you receive an
@@ -60445,10 +60578,11 @@ watcher.
 
 When you receive \`[Event: task.assigned]\`:
 
-1. Acknowledge with a comment: \`tasks comments add prll://tsk_xxx --body "On it"\`
-2. Update status: \`tasks update prll://tsk_xxx --status in_progress --placement end\`
-3. Do the work
-4. Report results in a comment. If a gate remains \u2014 review, merge, deploy,
+1. Resolve the project and read its current description as described above
+2. Acknowledge with a comment: \`tasks comments add prll://tsk_xxx --body "On it"\`
+3. Update status: \`tasks update prll://tsk_xxx --status in_progress --placement end\`
+4. Do the work
+5. Report results in a comment. If a gate remains \u2014 review, merge, deploy,
    requester acceptance \u2014 set \`in_review\` and name the gate; set \`done\`
    only once the work has actually landed
 
@@ -60456,9 +60590,10 @@ When you receive \`[Event: task.assigned]\`:
 
 When you receive \`[Event: task.comment.created]\`, someone commented on a task you are watching. Read the comment body and respond if action is needed:
 
-1. Review the comment content and task context
-2. Reply via comment: \`tasks comments add prll://tsk_xxx --body "Response..."\`
-3. If the comment requests status changes, update accordingly
+1. Resolve the project and read its current description as described above
+2. Review the comment content and task context
+3. Reply via comment: \`tasks comments add prll://tsk_xxx --body "Response..."\`
+4. If the comment requests status changes, update accordingly
 
 CLI success output is JSON; errors print a JSON line plus, on a \`PERMISSION_DENIED\`, an optional plain-text \`Request approval:\` line \u2014 read both.
 `;